{
  "cveId": "CVE-2024-36048",
  "url": "https://patchblox.com/security/cve/CVE-2024-36048",
  "summary": "CVE-2024-36048 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2024-36048, released May 18, 2024. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "qt6-networkauth: QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6,...",
  "description": "QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.",
  "published": "2024-05-18T21:15:47Z",
  "severity": "critical",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.0097,
  "epssPercentile": 0.62111,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "qt6-networkauth",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.7.2-2",
      "fix": "DEBIAN-CVE-2024-36048",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-36048",
      "released": "2024-05-18T21:15:47Z"
    },
    {
      "platform": "linux",
      "product": "qt6-networkauth",
      "release": "Debian 14",
      "fixedVersion": "6.7.2-2",
      "fix": "DEBIAN-CVE-2024-36048",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-36048",
      "released": "2024-05-18T21:15:47Z"
    },
    {
      "platform": "linux",
      "product": "qtnetworkauth-everywhere-src",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.15.13-3",
      "fix": "DEBIAN-CVE-2024-36048",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-36048",
      "released": "2024-05-18T21:15:47Z"
    },
    {
      "platform": "linux",
      "product": "qtnetworkauth-everywhere-src",
      "release": "Debian 14",
      "fixedVersion": "5.15.13-3",
      "fix": "DEBIAN-CVE-2024-36048",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-36048",
      "released": "2024-05-18T21:15:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}